5 associated with 

6 least one filter; 

7 a contro 



a received data packet in response to satisfying filter criteria associated with at 
and 

ler coupled to the network interface, to dynamically create and remove the filters 



8 controlling access to the different service levels based, at least in part, on an admissions profile. 



^ 2| \( Amended) The apparatus of claim 1, wherein the at least one filter when 

U 2 triggered, initiate an admission control decision preventing premature allocation of service level 
3 resources which are not yet required or authorized. 



1 3. (Amended) The apparatus of claim 2, wherein each of the filters is triggered by 

2 information contained Vithin the received data packet. 

1 4. (Amended)\The apparatus of claim 3 , wherein each of the filters is triggered by 

2 one or both of packet sourceYnformation and packet destination information. 

1 5. The apparatus of\laim 1, wherein the admissions profile is stored in a 

2 communicatively coupled remote aevice. 

1 6. The apparatus of clainrtf, wherein the communicatively coupled remote device is 

2 a bandwidth broker or other generic policy server. 

1 7. The apparatus of claim 1, wh\rein the admissions profile is available locally 

2 within the apparatus. 

1 8. (Amended) The apparatus of clairnM, wherein the controller establishes an 

2 ingress profile in response to detecting an associatedyigger event, wherein the ingress profile 

3 modifies the received data packet adhering to the filtercriteria to denote a particular service 

4 level, in accordance with the admissions profile. 



1 9. The apparatus of claim 8, wherein the controller removes ingress profiles when 

2 data packets adhering to the filter criteria are no longer received, liberating apparatus resources. 
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1 10. The Apparatus of claim 8, wherein the controller removes ingress profiles after a 

^predetermined periodVf time, liberating apparatus resources. 

v>\) I 

1 11. (AmendedVThe apparatus of claim 1 , wherein the controller removes at least one 

2 of the filters in accordance vtoth a network administration policy. 



1 12. (Amended) The apparatus of claim 1 1 , wherein the controller removes at least 

2 one of the filters based, at least in part, on time-of-day. 




1 13. (Amended) A method\or controlling provision of differentiated services in a data 

2 network, the method comprising: 

3 (a) installing a filter on a network edge device to provide a trigger notification upon 

4 detecting data packets adhering to filter criteria; 

5 (b) determining whether a received data packet satisfies the filter criteria; and 

6 (c) issuing a command by a bandwidth broker to a controller of the network edge 

7 device to dynamically install or remove a filter ^response to determining whether the received 

8 data packet satisfies the filter criteria. 

1 14. (Amended) The method of claim 13, fWther comprising (d) marking the received 

2 data packets adhering to the filter criteria according to a\ubscribed service level. 



1 



15. (CANCEL) 



1 16. (New) The method of claim 14, wherein the marking of the received data packet 
-Qfl/ includes setting a logic value of a\it in a Type of Service (ToS) field of a header of the data 

3 packel 

17. (New) The method of c\aim 14 further comprising: 

2 (e) identifying and marking the received data packets with routing information in 

3 accordance with the subscribed service le^ 
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1 s-y IS. (New) The method of claim 17 further comprising: 
^ n (v placing the data packets in a proper format for transmission. 



1 19. (New) The apparatus of claim 1, wherein the classifier marks a Type of Service 

2 (ToS) field of the receiveo\data packet to denote a level of service for transmission of the data 

3 packet. 



1 20. (New) The apparatus of claim 1, wherein the controller further dynamically 

2 controls access to at least one classifier profile in accordance with the admission profile. 




ss^iti 



21. (New) 



^ji apparatus adapted to facilitate communications between a client device 



2 and^a remote device, comprising: 



controlling access to different service levels; 

ifying and marking one of the service levels associated with the received 
to satisfying filter criteria associated with the filter means; and 
br dynamically creating and removing a portion of the filter means based 



filter means foi 
means for class 

5 data packet in response 

6 control means 

7 at least in part on an admission profile. 

lHT) 'V) 12. ^few) The apparatus of claim 21, wherein the admissions profile is stored in a 



2 communicatively Voupled remote device. 



1 23. (New\ The apparatus of claim 22, wherein the communicatively coupled remote 

2 device is a bandwidth broker or other generic policy server. 

1 24. (New) Th\ apparatus of claim 21, wherein the filter means comprises a plurality 

2 of filters. 



1 25. (New) The apparatus of claim 24, wherein the control means removes at least one 

2 of the filters in accordance with a network administration policy. 
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S.6. (New) Tfie apparatus of claim 25, wherein the control means removes at least one 
of the filters based, at least in part, on time-of-day. 
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